Member Avatar for faithecommerce

In my website many unnecessary pages added many time. I have delete many time he come again?

  • 3 Contributors
  • 2 Replies
  • 132 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by john_111

Dani AI

Generated

Persistent, reappearing pages usually point to an automated process or a hidden backdoor that recreates content after deletion. As observed, stolen credentials are a common entry point; as noted, sometimes caching or search behavior can look like extra pages — confirm whether the entries exist in the WordPress Pages list and in the database before taking irreversible steps.

Immediate containment (do these first; capture a copy of files/logs before changing anything):

  • Make a full file + database snapshot for forensics.
  • Reset all credentials (hosting/cPanel, SFTP/FTP, database user, WordPress users) and invalidate active sessions.
  • Put the site into maintenance mode or take it offline if possible.
  • Temporarily disable plugins and switch to a default theme if the admin area is accessible.

Quick checks to confirm a compromise and locate the persistence mechanism:

  • Verify real Pages in WP admin and run a DB query for recent pages (look at wp_posts for post_type = 'page').
  • Look for unexpected admin users in wp_users and unknown scheduled tasks in wp_options (cron).
  • Search the filesystem for recently modified files and common obfuscation patterns, for example:
    find . -type f -mtime -30 -print
grep -R --exclude-dir=wp-content/uploads -n "base64_decode\|eval\|gzinflate" .
find wp-content/uploads -type f -name "*.php"

    If deleted pages return, a backdoor PHP file or an external cron/process is likely recreating them.

Cleanup and prevention:

  • Prefer restoring from a clean pre-infection backup. If none exists, replace core files, reinstall plugins/themes from trusted sources, remove unknown files, and regenerate WordPress salts.
  • Scan externally (Sucuri SiteCheck) and with a plugin scanner; follow a tested cleanup guide (Wordfence has a step-by-step resource). Harden the site afterward (two-factor auth, limit logins, remove unused plugins/themes) — see the WordPress hardening guide and check Search Console for removed/indexing issues.

Preserve logs and consider professional cleanup if unfamiliar with forensic steps or if the infection is persistent.

References: Hardening WordPress, Sucuri SiteCheck, How to clean a hacked WordPress site - Wordfence,

Recommended Answers

All 2 Replies

Member Avatar for Dani

Do you have a WordPress site that perhaps someone else has gotten the admin password to? It sure sounds like your website has been hacked.

commented: How Can I secure? +0
Member Avatar for john_111

Can you show us the site and the extra pages? In some circumstances, a search on a wordpress site can make you think there are extra pages (One of my clients was totally convinced that WP was creating extra pages when he tried searches).

And if it is a WP site there are a few simple security changes you can make to lock out a hacker.

Edited by john_111
Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.